$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft File: OlU7bvgL-SIxL5a43cHyGajEEhs.mft (raw, json) Hash identifier: KqVsjSCcOJnfPRjDIB3f+gl5SDox1UtyccBR9Sw1ovo= Subject key identifier: 44:03:4A:2C:1F:64:73:1C:21:83:35:0E:A0:69:8C:6A:F7:B3:2B:6B Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B Certificate issuer: /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B Certificate serial: 0407 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft Manifest number: 03DC Signing time: Mon 20 Oct 2025 03:31:53 +0000 Manifest this update: Mon 20 Oct 2025 03:31:53 +0000 Manifest next update: Wed 22 Oct 2025 03:31:53 +0000 Files and hashes: 1: OlU7bvgL-SIxL5a43cHyGajEEhs.crl (hash: HoFZLx4+HFM+ZxjTV9U6Yidn8COf+ounhV6XcCCEob4=) 2: 401DB4F42F1E11F09B881AB3DAE4EC9C.roa (hash: xj4UFgtRmUF6hPhDY8QCTAupvw1psvGB0HcdO8EfGgk=) 3: 00C569A2002D11F08D8D918C762E951A.roa (hash: J2zGLkOSE56js9RNvJ4OT497mQJdthstAM3GPqfXq4g=) 4: A9777DB400A111F0BFE5D984762E951A.roa (hash: /NRI84ju86WCQqU5dc2FqAKEMK10FL0ooHDMUCIRqrU=) 5: 8A0596E448DE11EF82EDFA4F762E951A.roa (hash: pTkaYfOMalP4Ac9YVOrNd/HL6aUPMLSzJ9NLjfsNk8k=) 6: 1C19002A58A711EF91CC474E762E951A.roa (hash: 28b+AJrYiZxyaN6PahnQJz38qCvJBTTx3Q3ULsHDeuc=) 7: 7050CF3A2EAB11F0B4B053A7DAE4EC9C.roa (hash: aOFRM5Th4Ppr9x/V2gxhKzhGJiZ2YiGkDB5kt+uThQY=) 8: A46FECBA0D4611EF94FE720E017001B1.roa (hash: 1+eZFsoTVxew2nM8QAmKo9cbdoGw9gIVLATJ2Cve9BY=) 9: 487DF37800FE11F09431944D762E951A.roa (hash: vFH43GxrKZ9rqeJkPBqFNCpNF2wmx+m29HBGPHLRYRU=) 10: 409CF10850E111F0986264E2DAE4EC9C.roa (hash: Rv8B7d0mX6Fqq83MoQ7dcQHGa++1Fp9qoSXiOUYArXg=) 11: AE6DAEF23FE311F08E1CA0BADAE4EC9C.roa (hash: NcoPOIw5nkiJxRXHYEGD+Qp0wgE7N4ijW+oi6r7fxHs=) Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 22 Oct 2025 00:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B Validity Not Before: Oct 20 03:31:53 2025 GMT Not After : Oct 22 03:31:53 2025 GMT Subject: CN=68f5ad29-f0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a2:eb:c4:c1:bf:7a:42:4c:fb:a1:0b:34:90: 5f:3e:91:ff:23:d8:02:92:9d:9a:dd:c9:c9:39:01: f1:ac:44:51:28:34:01:25:46:96:a0:4a:76:2f:fe: 43:65:e9:66:a2:cd:bf:5f:1a:25:9d:7f:80:80:f9: d0:b6:54:c5:4e:21:b6:b3:57:d6:40:89:ad:b3:21: b5:cb:5a:5a:ef:4f:c6:f0:3e:14:e8:c5:80:61:92: 7a:03:1e:7f:a4:0d:f4:d0:97:82:8b:35:c4:a3:67: d3:5c:fe:46:aa:66:bd:f6:8c:1f:d1:26:5d:f6:b9: df:c6:0d:a2:fa:d0:d4:7d:9d:42:7e:53:25:fe:e1: e8:c8:66:f8:1c:02:7a:59:19:5d:5b:19:1d:9d:bd: 01:74:69:4b:3f:f6:77:79:85:8d:01:10:c3:17:9c: 94:86:6f:ea:10:7d:81:7a:b4:99:3b:62:42:ae:ad: c9:7a:f0:06:0d:46:22:e2:03:f7:24:e1:4c:b7:70: db:d7:8e:eb:ec:72:3c:a3:f4:24:6b:f0:5d:46:35: ce:c3:f6:9a:18:3a:c4:d4:68:0c:6b:49:ef:37:25: 67:27:91:28:69:65:f9:74:5b:a8:dd:83:16:9e:20: ad:97:f0:20:7c:47:47:87:da:24:32:97:98:fb:48: 13:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:03:4A:2C:1F:64:73:1C:21:83:35:0E:A0:69:8C:6A:F7:B3:2B:6B X509v3 Authority Key Identifier: keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:1a:7a:20:2e:2d:e9:9d:d8:b8:61:a5:61:0d:26:e8:ef:b6: 81:6d:1c:5d:7a:51:ae:a8:4b:15:1f:6e:14:b1:58:ea:8f:d0: 10:12:fc:af:79:72:db:3f:52:8d:7e:6c:81:29:47:3b:63:07: ca:c6:3e:fc:9b:94:3c:1b:f6:24:79:19:7f:1d:b0:83:eb:7e: c9:6e:4a:8e:44:b3:5f:3c:79:d7:42:5c:00:d3:f1:d8:09:4f: 61:f8:92:23:49:fb:56:89:1c:0a:34:f0:1e:34:6f:d0:bc:a1: fd:fc:1d:e8:e9:48:30:3d:cd:9d:34:6a:06:0d:0e:fb:3b:c7: 34:14:13:78:35:6b:f1:d2:6c:f4:c4:bf:44:41:0f:35:5d:10: c7:4b:27:af:94:fb:fd:09:7c:ab:78:08:d3:c3:e8:d8:42:a7: 5c:6f:94:64:c4:93:60:56:30:d2:33:29:54:e5:a2:b3:c7:b2: 7c:97:34:54:94:68:56:03:76:80:f7:be:b6:4a:b6:9d:02:e4: 70:cf:17:91:54:67:b5:28:3c:11:46:15:62:8e:d9:37:05:82: 44:dd:8b:0a:57:cc:5b:7f:03:1a:2c:f6:fe:e1:65:08:ee:f7: cd:93:d0:f9:af:bd:6c:1c:d5:91:f2:6c:7b:49:2d:82:9d:be: 01:51:6a:95 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 RUY3RDBBRjExMC8GA1UEBRMoM0E1NTNCNkVGODBCRjkyMjMxMkY5NkI4RERDMUYy MTlBOEM0MTIxQjAeFw0yNTEwMjAwMzMxNTNaFw0yNTEwMjIwMzMxNTNaMBgxFjAU BgNVBAMTDTY4ZjVhZDI5LWYwZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC8ouvEwb96Qkz7oQs0kF8+kf8j2AKSnZrdyck5AfGsRFEoNAElRpagSnYv /kNl6Waizb9fGiWdf4CA+dC2VMVOIbazV9ZAia2zIbXLWlrvT8bwPhToxYBhknoD Hn+kDfTQl4KLNcSjZ9Nc/kaqZr32jB/RJl32ud/GDaL60NR9nUJ+UyX+4ejIZvgc AnpZGV1bGR2dvQF0aUs/9nd5hY0BEMMXnJSGb+oQfYF6tJk7YkKurcl68AYNRiLi A/ck4Uy3cNvXjuvscjyj9CRr8F1GNc7D9poYOsTUaAxrSe83JWcnkShpZfl0W6jd gxaeIK2X8CB8R0eH2iQyl5j7SBOzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQURANK LB9kcxwhgzUOoGmMavezK2swHwYDVR0jBBgwFoAUOlU7bvgL+SIxL5a43cHyGajE EhswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkVGN0QwLzM2RTQwQTE2RjJGQjExRUQ4MjFCOUQ4MDRBRDlFNkZDL09sVTdi dmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL09sVTdidmdMLVNJeEw1YTQzY0h5R2FqRUVocy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RUY3RDAvMzZFNDBBMTZGMkZCMTFFRDgyMUI5RDgwNEFE OUU2RkMvT2xVN2J2Z0wtU0l4TDVhNDNjSHlHYWpFRWhzLm1mdDA1BggrBgEFBQcw DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyGnogLi3pndi4YaVhDSbo77aBbRxd elGuqEsVH24UsVjqj9AQEvyveXLbP1KNfmyBKUc7YwfKxj78m5Q8G/YkeRl/HbCD 637JbkqORLNfPHnXQlwA0/HYCU9h+JIjSftWiRwKNPAeNG/QvKH9/B3o6UgwPc2d NGoGDQ77O8c0FBN4NWvx0mz0xL9EQQ81XRDHSyevlPv9CXyreAjTw+jYQqdcb5Rk xJNgVjDSMylU5aKzx7J8lzRUlGhWA3aA9762SradAuRwzxeRVGe1KDwRRhVijtk3 BYJE3YsKV8xbfwMaLPb+4WUI7vfNk9D5r71sHNWR8mx7SS2Cnb4BUWqV -----END CERTIFICATE-----Generated at Mon Oct 20 10:19:59 2025 by rpki-client